CVE-2024-40088

5.3 mediumEPSS 0.7%

Medium (5.3) in viloliving vilo 5 firmware. EPSS 0.7% chance of exploitation in the next 30 days.

A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to enumerate the existence and length of any file in the filesystem by placing malicious payloads in the path of any HTTP request.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-116
Published: 2024-10-21
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

viloliving:vilo_5_firmware

References

https://github.com/byu-cybersecurity-research/vilo/blob/main/vulns/CVE-2024-40088.md

Check your stack JSON